Security Engineer - Detection Engineering and Threat Modeling

Hitachi, Ltd.; Kraków; On-site; PLN 150,000 - 230,000; Full time

Benefits offered by this job

Private medical care

Life insurance

Fitness programs

Benefits platform

Employee Capital Plans

Home office equipment

Glasses allowance

Company events

Psychological support

Free parking

Job summary

Hitachi Energy seeks a Security Engineer specializing in threat modeling and detection engineering to strengthen our SOC capabilities. You will design detection rules, onboard data sources, and drive automation across monitoring and response workflows.

The role emphasizes collaboration with cybersecurity and engineering teams to keep pace with evolving threats and implement MITRE ATT&CK-aligned monitoring. This maternity coverage is a 12-month contract.

Qualifications

• 2–3 years in detection engineering or SOC roles.
• Experience writing and tuning SIEM detection rules.
• Knowledge of Python, KQL, or SQL for security monitoring.
• Understanding log sources across endpoints, networks, cloud environments.

Responsibilities

• Design, tune detection rules within the SIEM to improve threat visibility and reduce false positives.
• Onboard new log sources by building ingestion pipelines and normalizing data for SIEM integration.
• Perform threat modeling of systems and log sources to identify detection requirements and security gaps.
• Build and maintain automation solutions that improve SOC workflows and reporting.
• Collaborate with cybersecurity and engineering teams to enhance detection coverage against evolving threats.
• Apply threat intelligence and frameworks such as MITRE ATT&CK to strengthen monitoring and response capabilities.
• Contribute to detection-as-code practices and CI/CD-driven security operations processes.
• Support continuous improvement of security monitoring, alert quality, and cyber defense effectiveness.

Skills

Detection engineering

Security operations

SIEM tuning

Threat modeling

Python

KQL

SQL

Education

Cybersecurity degree

Tools

Microsoft Sentinel

Azure

AWS

Docker

Linux

Job description

The Opportunity

Join Hitachi Energy as a Security Engineer specializing in Threat Modeling and Detection Engineering, and play a critical role in strengthening our cybersecurity operations. In this position, you will help design and enhance detection capabilities, onboard and secure new data sources, and drive automation that improves the effectiveness and efficiency of the Security Operations Center (SOC). Working at the intersection of threat detection, systems engineering, and cybersecurity, you will contribute to protecting critical infrastructure and enabling a proactive, intelligence-driven approach to cyber defense.

How You Will Make an Impact

• Design, develop, and tune detection rules within the SIEM to improve threat visibility and reduce false positives

• Onboard new log sources by building ingestion pipelines, normalizing data, and ensuring high-quality integration into the SIEM

• Perform threat modeling of systems and log sources to identify detection requirements and security gaps

• Build and maintain automation solutions that improve SOC workflows, reporting, and operational efficiency

• Collaborate with cybersecurity and engineering teams to continuously enhance detection coverage against evolving threats

• Apply threat intelligence and frameworks such as MITRE ATT&CK to strengthen monitoring and response capabilities

• Contribute to detection-as-code practices and CI/CD-driven security operations processes

• Support continuous improvement of security monitoring, alert quality, and overall cyber defense effectiveness

Your Background

• 2–3 years of experience in detection engineering, security operations, or related cybersecurity engineering roles

• Experience writing and tuning SIEM detection rules and developing actionable detection content

• Knowledge in Python, KQL, SQL, or similar technologies used for security monitoring and automation

• Understanding of log sources across endpoint, identity, network, cloud, and infrastructure environments

• Experience with Microsoft Sentinel, Defender Suite, Azure, AWS, Docker, Linux, or similar security technologies is an advantage

• Familiarity with threat modeling, MITRE ATT&CK, log ingestion pipelines, and security automation practices

NOTE: this is maternity coverage - 12 months contract

More about us

At Hitachi Energy, we recognize that our people are at the heart of our success. We are committed to providing a supportive and inclusive workplace, competitive rewards, and opportunities for professional and personal growth. Our benefits package is designed to help employees thrive both at work and in their personal lives.

Our benefits offering for this role generally includes:

• Private medical care and life insurance
• Access to fitness and wellness programs
• Access to benefits platform with discounts and perks
• Employee Capital Plans (PPK)
• Equipment for working from home or allowances for setting up a workplace at home
• Spectacles and contact lenses allowance
• Company events and team‑building activities
• Psychological support program
• Free parking available

Add if applicable: additional benefits may apply depending on the role, grade, and business requirements.

You will receive more specific information during the recruitment process.